​​​​​​​​​​​​​​​Sign in and Password Reset Instructions​


Select which password you need to reset​ for reset instructions



SCO Legacy Applications

Mainframe (CESN or DSYS)



SCO Legacy Applications 

Password Reset Procedures for I-Time, Paystubs, Statewide Accounting System, Vendors and W-2's

All password resets will be sent to the user's primary or secondary email address via Secure Email.

For any issues encountered during the password reset process or to reset a password, send an email to servicedesk@sco.idaho.gov

Forgot Password

If you do not remember your password follow the steps below:

  • To access user applications sign-in page select any SIGN IN button.

  • Begin SIGN IN by entering your user name and agency code. 

  • Select “Forgot your Password?"
    • Answer your Challenge Question and select SIGN IN.        
    • A message will appear containing your primary and secondary (if applicable) email address.              
    • If neither of the email addresses are correct, then see Invalid Email Address below.    


  • A new password will be sent to both the primary and secondary (if applicable) email addresses on file with the State Controller's Office.
    • If a new password is not received within 30 minutes or to request a password reset, contact servicedesk@sco.idaho.gov

Changing Your Password

  • To access user applications sign-in page select any SIGN IN button.

  • Begin SIGN IN by entering your user name and agency code 

  • After successful sign-in select the user menu in the upper-right, then select Change Password.

  • Enter your current password.

  • Enter a new desired password.

  • Select “Submit".

    • ​​A pop-up message will confirm the password change was accepted. The new password will be available for use approximately 30 minutes after it was submitted. A new challenge question will need to be established.

Forgot Challenge Question Answer

The challenge question and SCO Password credentials are linked and must be reset together. Contact the SCO Service Desk at servicedesk@sco.idaho.gov.

SCO Website Crede​ntial Requirements

User name and passwords are sent via USPS to the employee's HR/Payroll department or directly to the vendor.

User name: 

  • Contains a space between the first and last name. Example: john smith
  • Not case sensitive.​


  • Must be a minimum of 8 characters. 
  • Contain a combination of alpha and numeric characters. 
  • Password is case sensitive. 
  • Passwords expire every 180 days. A warning message will be displayed fifteen (15) days prior to the expiration date.

Challenge Question and Answer: ​

  • Required at each sign in to provide additional security and authentication 
  • Answer is not case sensitive.
  • Answer must be at least 4 characters.
  • Answer cannot contain special characters or spaces.

Note: All password changes will reset the current challenge question and require you to establish a challenge question and answer the next time you log on.​​

Invalid Email Address

All password resets will be sent to the email address or addresses registered to your State Controller's Office account. The SCO Service Desk cannot issue SCO password credentials to a non-registered email address. Utilize the following instructions that best match your situation: 

Active State Employees– Changes to an employee's primary email address are made by contacting your agency HR/Payroll department.  Employees can update their secondary email address through IPOPS Self-Service and updating the Employee Secondary Email form. The State Of Idaho Controller's Office cannot make changes to a user's primary email address. If you do not have access to your primary or secondary email addresses, Agency Security Administrators at your agency may request a password reset on your behalf.

Former State Employee - Request for password resets must be sent via email to servicedesk@sco.idaho.gov  The request must come from the requesting employee's primary or secondary e-mail address registered with the State Controller's Office. If you do not have access to your registered email address, Agency Security Administrators at your former agency may request a password reset on your behalf.

STARS and Payroll Vendors - Changes to vendor (VND) access and e-mail addresses should be sent to servicedesk@sco.idaho.gov










Basic Sign-In Instructions


Enter StateID and password in the SCO Enterprise Dashboard sign-in page.  Select Sign in button.



Forgot your Password or Unlock your Account

State employees have the ability to Reset their Password AND Unlock their Luma accounts using email confirmation authentication.
**Please contact the SCO ServiceDesk for direct assistance with this process if needed.

1.     Select the Forgot your Password? Link.

2.    A new window/tab opens to the Account Self Service page. The Forgot your Password? Section is open by default.  Select the Account locked out? Section if that is what you are attempting.


3.     Fill out the Forgot your password? form:

o   Enter your State ID number in the Username field (assigned when you registered)

o   Make sure the domain of IDAHOIDP is listed.

o   Type the CAPTCHA characters shown in the box, and select continue.


4.    Select the Email Verification choice and Continue. (Duo Security presently only shows for some employees)


5.    Select the Email Address you would like the verification code to be sent to.  You may select either your Primary Email address or your Alternate Email addresse from your State Employment record.


6.    An email will arrive to the selected email address from noreply@sco.idaho.gov.  Copy the code noted by the red arrow below.


-        ***If you receive this email WITHOUT having requested any password reset or account unlock, please notify servicedesk@sco.idaho.gov


7.    Paste or type the code into the field provided and press Continue.


8.    If you are Resetting your Password, enter and repeat the new passwords.  You are shown visual feedback of your passwords complexity.  Once all complexity requirements show green checkmarks, select Reset Password.


9.    If successful, you will receive visual confirmation and email confirmation.




-        ***If you receive this email WITHOUT having requested any password reset or account unlock, please notify servicedesk@sco.idaho.gov


10.  Close browser tab and continue with sign-in.  Back to home link will only return you to the Account Self Service page.

Expired Password

Once 60 days has been reached without a password change, the system will automatically redirect you to change the password when logging on

1.     Enter and verify a password that meets all of the previously-listed requirements, and click Proceed with registration


2.    Click the link to return to the sign-in page once password has been set successfully


Password Complexity

·         Must contain a minimum of Fourteen (14) characters

·         Case-sensitive

·         Cannot contain more than Two (2) consecutive characters from your State ID or your First or Last name.

·         Must contain at least 3 of these 4 items:

o   Upper case letters

o   Lower case letters

o   Numbers

o   Special characters
Allowed special characters:

·         Will expire every Sixty (60) days and require change during next Sign-in

·         Cannot reuse any of the last Twenty-Four (24) changes.

·         Account Lockout occurs after Three (3) invalid sign-in attempts.









Mainframe (CESN or DSYS) Password Reset Procedures


For users of STARS and Payroll Online Inquiry:

Initial user name and password are emailed via Secure Email to each user directly once the user's security request has been fulfilled.  Multiple credentials are often required to these systems, and are denoted as: CESN username and password, STARS Operator ID and password, and Employee Information System (NATP) Security Code.


CESN username and password:  (used for the initial sign-in to the terminal session) 

User names are 6-8 characters and are not case sensitive.

    Password Requirements:

    • Passwords must be 8 characters and contain at least one alpha and one numeric character. 
    • No alpha or numeric characters can be repeated in succession.
    • Passwords cannot contain the User ID.
    • Passwords cannot contain part of the users first or last name.
    • ​Passwords will expire every 90 days. A warning message will be displayed fifteen (15) days prior to the expiration date.  
    • Users are required to change the generated password the first time signing in.

    SCO recommends setting a calendar reminder every 80 days to sign in to the SCO mainframe and update the password. Following this practice will prevent any kind of suspension to the account. For questions, please contact the SCO Security Request team at accessrequest@sco.idaho.gov 


    STARS (DSYS) Operator ID and password:

    Operator IDs are 3 characters and are not case sensitive.

      Password Requirements:

      • Passwords must be 3 characters. 
      • Passwords can contain alpha and numeric characters.
      • Passwords will expire every 180 days. A warning message will be displayed fourteen(14) days prior to the expiration date.
      • ​Users are encouraged to change the generated password after signing in for the first time and to follow best practice policies for creating and maintaining passwords.


      Employee Information System (NATP) Security Code:

      Security Codes are 4 characters and are not case sensitive.​

      If the security code is not working or forgotten, please contact the Payroll Helpdesk at servicedesk@sco.idaho.gov

      Expired Password

      If your password has expired:

      1. Enter your Userid and 'old' password
      2. In the 'New Password' field enter a new password and press Enter.
      3. The system will then ask to confirm the new password. Re-enter the new password again in the 'New Password' field.

      Forgot Password

      If you do not remember your password or are 'locked out':

      1. Contact the Security Administrator at your agency, or e-mail us at servicedesk@sco.idaho.gov

      Mainframe password reset requests must come from your primary or secondary e-mail address.

      Please include one of the following messages depending on which password needs reset (Mainframe password reset request only):

      • I need my CESN password reset. My Userid is ...
      • I need my DSYS password reset. My Operator ID is...​​